linux-toradex.git, branch v2.6.15.1

Linux 2.6.15.1

2006-01-15T06:16:02+00:00

[PATCH] arch/sparc64/Kconfig: fix HUGETLB_PAGE_SIZE_64K dependencies

2006-01-15T06:15:30+00:00

This patch fixes a typo in the dependencies of HUGETLB_PAGE_SIZE_64K.

This bug was reported by Jean-Luc Leger .

Signed-off-by: Adrian Bunk 
Signed-off-by: David S. Miller 
Signed-off-by: Chris Wright

[PATCH] fix /sys/class/net//wireless without dev->get_wireless_stats

2006-01-15T06:15:30+00:00

dev->get_wireless_stats is deprecated but removing it also removes wireless
subdirectory in sysfs. This patch puts it back.

akpm: I don't know what's happening here.  This might be appropriate as a
2.6.15.x compatibility backport.  Waiting to hear from Jeff.

Signed-off-by: Andrey Borzenkov 
Cc: "David S. Miller" 
Cc: Jeff Garzik 
Cc: 
Signed-off-by: Andrew Morton 
Signed-off-by: Chris Wright

[PATCH] moxa serial: add proper capability check

2006-01-15T06:15:30+00:00

This requires the proper capabilities for the moxa bios update ioctl's.

Signed-off-by: Alan Cox 
Signed-off-by: Linus Torvalds 
Signed-off-by: Chris Wright

[PATCH] Fix DoS in netlink_rcv_skb() (CVE-2006-0035)

2006-01-15T06:15:30+00:00

Sanity check nlmsg_len during netlink_rcv_skb.  An nlmsg_len == 0 can
cause infinite loop in kernel, effectively DoSing machine.  Noted by
Martin Murray.

Signed-off-by: Chris Wright 
Signed-off-by: David S. Miller

[PATCH] Fix sys_fstat64() entry in 64-bit syscall table.

2006-01-15T06:15:30+00:00

Noticed by Jakub Jelinek.

Signed-off-by: David S. Miller 
Signed-off-by: Chris Wright

[PATCH] Fix ptrace/strace

2006-01-15T06:15:30+00:00

Don't clobber register %l0 while checking TI_SYS_NOERROR value in
syscall return path.  This bug was introduced by:

db7d9a4eb700be766cc9f29241483dbb1e748832

Problem narrowed down by Luis F. Ortiz and Richard Mortimer.

I tried using %l2 as suggested by Luis and that works for me.

Looking at the code I wonder if it makes sense to simplify the code
a little bit. The following works for me but I'm not sure how to
exercise the "NOERROR" codepath.

Signed-off-by: David S. Miller 
Signed-off-by: Chris Wright

[PATCH] Don't match tcp/udp source/destination port for IP fragments

2006-01-15T06:15:29+00:00

Signed-off-by: Bart De Schuymer 
Signed-off-by: David S. Miller 
Signed-off-by: Chris Wright

[PATCH] Fix another crash in ip_nat_pptp (CVE-2006-0037)

2006-01-15T06:15:29+00:00

The PPTP NAT helper calculates the offset at which the packet needs
to be mangled as difference between two pointers to the header. With
non-linear skbs however the pointers may point to two seperate buffers
on the stack and the calculation results in a wrong offset beeing
used.

Signed-off-by: Patrick McHardy 
Signed-off-by: Chris Wright

[PATCH] Fix crash in ip_nat_pptp (CVE-2006-0036)

2006-01-15T06:15:29+00:00

When an inbound PPTP_IN_CALL_REQUEST packet is received the
PPTP NAT helper uses a NULL pointer in pointer arithmentic to
calculate the offset in the packet which needs to be mangled
and corrupts random memory or crashes.

Signed-off-by: Patrick McHardy 
Signed-off-by: Chris Wright